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herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
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1 . £3 This communication is responsive to 11/01/2007 . 

2. ^ The allowed claim(s) is/are 1-38 . 
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International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 

EXAMINER 'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Alessandro Steinfl, Reg. No. 56,448 on 1/9/2008. 

1. Replace claim 1 with the following (shown marked up here, followed by clean version): 

1 . An apparatus for accessing data from a database through a security mechanism, the 
database being accessible to a database access port, the security mechanism allowing access 
through a security access port, the apparatus comprising: 
a first application capabl e of configured to be 
b e ing executed on a client computer; 
one or more proxy objects 

being generated in response to 

commands from the first application, 
the proxy objects requesting 
data from a database; 
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one or more drivers capabl e of configured to be 
b e ing stored on a server computer; and 
a second application capabl e of configured to be 
being-executed on a server computer 

separated from the first application by the security mechanism, 
the second application 

receiving the proxy objects from the first application, 
generating a database query based on 
the proxy objects and 
the drivers and 
returning the database query results to the first application, 
wherein the first application is configured 

to detect a request to pass the proxy objects through 

the database access port, and 
to switch passage of the proxy objects to 
the security access port, and 
wherein the second application is configured 
to return database query results to 
the first application through 

the security access port. 

Clean claim version: 
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1 . An apparatus for accessing data from a database through a security mechanism, the 
database being accessible to a database access port, the security mechanism allowing access 
through a security access port, the apparatus comprising: 
a first application configured to be 

executed on a client computer; 
one or more proxy objects 

being generated in response to 

commands from the first application, 
the proxy objects requesting 
data from a database; 
one or more drivers configured to be 

stored on a server computer; and 
a second application configured to be 
executed on a server computer 

separated from the first application by the security mechanism, 
the second application 

receiving the proxy objects from the first application, 
generating a database query based on 
the proxy objects and 
the drivers and 
returning the database query results to the first application, 
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wherein the first application is configured 

to detect a request to pass the proxy objects through 

the database access port, and 
to switch passage of the proxy objects to 
the security access port, and 
wherein the second application is configured 
to return database query results to 
the first application through 

the security access port. 



Examiner's Statement of Reasons for Allowance 

2. Claims 1-38 are allowed over prior art. 

3. This action is in reply to applicant's correspondence of 01 November 2007. 

4. The following is an examiner's statement of reasons for the indication of allowable 
claimed subject matter. 

5. As per claims 1, 1 1, 20, 29 and 30 generally, prior art of record, Van Watermulen et al, 
U.S. Patent 6,604,046 Bl, and Albaugh et al, U.S. Patent 6,687,831 Bl, fails to teach alone, or in 
combination, other than via hindsight, at the time of the invention, the features as discussed and 
remarked upon in the response of 01 November 2007 to office action of 06/12/2007. 

Specifically, (as per claim 1, for example) prior art dealing with distributed Web 
applications and associated distributed objects/resources communications/security aspects, 
insofar as associated security mechanisms used to support the distributed Web applications are 
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concerned (i.e., database access across the Internet thru firewalls, etc., using the Java 
environment and associated components), is generally known to exist per se, (i.e., enterprise 
security maintained in an environment that utilizes CORBA, EJB, HOP, etc., PrismTech, 'Firewall 

Security for Corba and J2ee/EJB with the HOP Domain Boundary Controller', PrismTech, 2004-2007, Xtradyne White Paper, 
entire document, http://www.xtradynexom/documents/whitepapers/Xtradyne-I-DBC- WhitePaper.pdf). However, nowhere 

in the prior art is found collectively the italicized claim elements (i.e., the rerouting of proxy 
object based requests and subsequent response(s) via separate database access and security 
access ports, in a client/server object oriented network environment), at the time of the invention; 
serving to patently distinguish the invention from said prior art; 

"1 . An apparatus for accessing data from a database through a security mechanism, the 
database being accessible to a database access port, the security mechanism allowing access 
through a security access port, the apparatus comprising: 
a first application configured to be 

executed on a client computer; 
one or more proxy objects 

being generated in response to 

commands from the first application, 
the proxy objects requesting 
data from a database; 
one or more drivers configured to be 

stored on a server computer; and 
a second application configured to be 
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executed on a server computer 

separated from the first application by the security mechanism, 
the second application 

receiving the proxy objects from the first application, 
generating a database query based on 
the proxy objects and 
the drivers and 
returning the database query results to the first application, 
wherein the first application is configured 

to detect a request to pass the proxy objects through 

the database access port, and 
to switch passage of the proxy objects to 
the security access port, and 
wherein the second application is configured 
to return database query results to 
the first application through 

the security access port". 
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Conclusion 

6. Any inquiry concerning this communication or earlier communications from examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3861 , and whose 
unofficial Fax number is (571) 273-3861 and unofficial email is Ronald.baum@uspto.gov. The 
examiner can normally be reached Monday through Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami, can be reached at (571) 272-4195. The Fax number for the 
organization where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information for 
unpublished applications is available through Private PAIR only. For more information about the 
PAIR system, see http ://pair-direct.uspto . gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Ronald Baum 
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